StackRadar

CVE-2026-54370

High

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.2
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,524
of 17,837 indexed, latest versions
Container images
2,490
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-54370 affecting package acl for versions less than 2.4.0-1

Carried by container images the latest versions of 2,524 of 17,837 indexed charts deploy, on 2,490 images.

Affected packageAffected versionsFixed inImages
acldeb2.2.52-1, 2.2.52-3, 2.2.52-3build1, 2.2.53-6+8 more2.4.0-12,487
aclrpm2.3.1-2.azl32.4.0-13
OSV records
DEBIAN-CVE-2026-54370UBUNTU-CVE-2026-54370AZL-91394ECHO-ae30-49be-9cc5

Charts affected

2,524 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,490 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/nginx:1.25.49ff236ed47fe
acl@2.3.1-3
no fix listed
1
library/nginx:1.31a53fc6c27208
acl@2.3.2-2+b1
no fix listed
1
library/nginx:latestcfb8a89ac237
acl@2.3.2-2+b1
no fix listed
1
library/nginx:1.27.3fb197595ebe7
acl@2.3.1-3
no fix listed
1
library/node:22-bookworm-slim48e4b67d85f8
acl@2.3.1-3
no fix listed
1
library/node:208f693eaa7e0a
acl@2.3.1-3
no fix listed
1
library/node:latestfa271c47a5d8
acl@2.3.2-2+b1
no fix listed
1
library/php:8.4-fpm223115611852
acl@2.3.2-2+b1
no fix listed
1
library/phpmyadmin:5.2.3-apache:latest3a8a8d6b5289
acl@2.3.2-2+b1
no fix listed
1
library/phpmyadmin:5.2.3-apacheadc486045303
acl@2.3.2-2+b1
no fix listed
1
library/postgres:18.0073e7c8b84e2
acl@2.3.2-2+b1
no fix listed
1
library/postgres:18:18.6-trixie10037cee1d5e
acl@2.3.2-2+b1
no fix listed
1
library/postgres:14156f0b253fd6
acl@2.3.2-2+b1
no fix listed
1
library/postgres:14.232f439458ab6a
acl@2.3.2-2+b1
no fix listed
1
library/postgres:17.4304ab8135187
acl@2.3.1-3
no fix listed
1
library/postgres:18.43a82e1f56c8f
acl@2.3.2-2+b1
no fix listed
1
library/postgres:143e7dd0bfd7bf
acl@2.3.2-2+b1
no fix listed
1
library/postgres:16.11468e1f126ca5
acl@2.3.2-2+b1
no fix listed
1
library/postgres:16.6557fea37a744
acl@2.3.1-3
no fix listed
1
library/postgres:1767f41722b7a8
acl@2.3.2-2+b1
no fix listed
1
library/postgres:18.369e8582b781c
acl@2.3.2-2+b1
no fix listed
1
library/postgres:15.186eb0add3b77c
acl@2.3.2-2+b1
no fix listed
1
library/postgres:15.38775adb39f0d
acl@2.3.1-3
no fix listed
1
library/postgres:18.48ff36f3c6637
acl@2.3.2-2+b1
no fix listed
1
library/postgres:18.3a9abf4275f9e
acl@2.3.2-2+b1
no fix listed
1
library/postgres:17.5aadf2c0696f5
acl@2.3.2-2+b1
no fix listed
1
library/postgres:13.12ced3ba927f4c
acl@2.3.1-3
no fix listed
1
library/postgres:15.18-bookworme8db9bd3e9e1
acl@2.3.1-3
no fix listed
1
library/postgres:17.10ebba4f4de37f
acl@2.3.2-2+b1
no fix listed
1
library/postgres:17.5-bookwormfbcea1bd13b6
acl@2.3.1-3
no fix listed
1
library/python:3.12-slim78387bc3881b
acl@2.3.2-2+b1
no fix listed
1
library/python:3.8d41127070014
acl@2.3.1-3
no fix listed
1
library/python:3.11-slimda047cb8f9d1
acl@2.3.2-2+b1
no fix listed
1
library/python:3.9da5aee29682d
acl@2.3.2-2+b1
no fix listed
1
library/rabbitmq:3.12.100742852455ad
acl@2.3.1-1
no fix listed
1
library/rabbitmq:3.11.5-management1b0f675d2f24
acl@2.2.53-6
no fix listed
1
library/rabbitmq:4.3.6-management534e4fefc5f0
acl@2.3.2-1build1.1
no fix listed
1
library/rabbitmq:4.3.667bad329974a
acl@2.3.2-1build1.1
no fix listed
1
library/rabbitmq:4.2.87561d672fae4
acl@2.3.2-1build1.1
no fix listed
1
library/rabbitmq:3.7-managementb6dd45cc35b3
acl@2.2.52-3build1
no fix listed
1
library/rabbitmq:4.3.6-managementde62d9901fb7
acl@2.3.2-1build1.1
no fix listed
1
library/rabbitmq:4.3.4-managementeb5295d08332
acl@2.3.2-1build1.1
no fix listed
1
library/redis:8.6.2009cc37796fb
acl@2.3.2-2+b1
no fix listed
1
library/redis:8.8.0234c902a2db4
acl@2.3.2-2+b1
no fix listed
1
library/redis:7.0.15352c1fdadc91
acl@2.3.1-3
no fix listed
1
library/redis:8.4.03906b477e4b6
acl@2.3.1-3
no fix listed
1
library/redis:8.8.1-trixie3eafabb4c93f
acl@2.3.2-2+b1
no fix listed
1
library/redis:8.2.24521b581dbdd
acl@2.3.1-3
no fix listed
1
library/redis:8.6.34d25e2fe601f
acl@2.3.2-2+b1
no fix listed
1
library/redis:8.2.15fa2edb1e408
acl@2.3.1-3
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.